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(57) Abstract: A secret file access authorization system with fingerprint limitation includes an authorization module, a encrypt 
module and a certification module in the server linked by the programs; and at least one client, each client is provided with a user 
module^ this user module contains a kemel encrypt/decrypt unit embedded in the client operation system kernel, therefore it can realize 
that access authorization to the secure file is limited by environment fingerprint and time fingerprint Therein an authorization module 
provides authorization secret key and fingerprint template; an encrypt module receives the input of authorization secret key and secret 
files to be encrypted and provides the secret key for decryption; a user module receives the authorization secret key and encrypted 
secret file and provides authorization secret key certification request to cenification module; a certification module receives the decrypt 
secret key and authorization secret key certification request and fingerprint template, and provides certification decrypt secret key to the 
user to start up kemel encrypt/decrypt unit in the user modules and realizes the operation of reading and writing of the encrypted files. 
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